Closed
Bug 1012646
Opened 10 years ago
Closed 10 years ago
Crash in strlen through [@ js::SavedStacks::insertFrames] with enableTrackAllocations
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla32
Tracking | Status | |
---|---|---|
firefox32 | --- | affected |
People
(Reporter: decoder, Assigned: fitzgen)
Details
(Keywords: crash, testcase, Whiteboard: [jsbugmon:update,bisect])
Crash Data
Attachments
(2 files)
416 bytes,
text/plain
|
Details | |
1.41 KB,
patch
|
ejpbruel
:
review+
|
Details | Diff | Splinter Review |
The following testcase crashes on mozilla-central revision 41a54c8add09 (run with --fuzzing-safe): enableTrackAllocations(); evaluate("throw Error();", {fileName: null});
Reporter | ||
Comment 1•10 years ago
|
||
Reporter | ||
Comment 2•10 years ago
|
||
Nick, is this fallout from your patch? :)
Assignee | ||
Comment 3•10 years ago
|
||
How many crashers did I create?? :( Will investigate.
Assignee: nobody → nfitzgerald
Flags: needinfo?(nfitzgerald)
Assignee | ||
Comment 4•10 years ago
|
||
https://tbpl.mozilla.org/?tree=Try&rev=0457a9e3d766
Attachment #8425858 -
Flags: review?(ejpbruel)
Comment 5•10 years ago
|
||
Comment on attachment 8425858 [details] [diff] [review] strlen-crasher.patch Review of attachment 8425858 [details] [diff] [review]: ----------------------------------------------------------------- LGTM
Attachment #8425858 -
Flags: review?(ejpbruel) → review+
Assignee | ||
Updated•10 years ago
|
Keywords: checkin-needed
Comment 6•10 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/b34ba09e0391
Keywords: checkin-needed
Comment 7•10 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/b34ba09e0391
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla32
You need to log in
before you can comment on or make changes to this bug.
Description
•